Detections
Analytics

1.127 O365-WD-000005

Information

If file validation fails, files must be opened in Protected view in Word with ability to edit disabled.

GROUP ID: V-223404
RULE ID: SV-223404r961086

This policy setting controls how Office handles documents when they fail file validation.

If you enable this policy setting, you can configure the following options for files that fail file validation:

 - Block files completely. Users cannot open the files.
 - Open files in Protected View and disallow edit. Users cannot edit the files. This is also how Office handles the files if you disable this policy setting.
 - Open files in Protected View and allow edit. Users can edit the files. This is also how Office handles the files if you do not configure this policy setting.

If you disable this policy setting, Office follows the 'Open files in Protected View and disallow edit' behavior.

If you do not configure this policy setting, Office follows the 'Open files in Protected View and allow edit' behavior.

Solution

Set the policy value for

User Configuration >> Administrative Templates >> Microsoft Word 2016 >> Word Options >> Security >> Trust Center >> Protected View >> Set document behavior if file validation fails

to 'Enabled: Open in Protected View'.

Uncheck the 'Allow edit' check box.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(1), CAT|II, CCI|CCI-001662, Rule-ID|SV-223404r961086_rule, STIG-ID|O365-WD-000005, Vuln-ID|V-223404

Plugin: Windows

Control ID: e81dcc8aad59c03873db6e3932358cf2e35e8b6a81e44a300b1a8831b2d7e781